$ rpki-client -vvf repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft File: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft (raw, json) Hash identifier: yASitMhUqSx0RQZYOGQKFUI4KZOF+jsz5WeUMEgk5G4= Subject key identifier: CB:14:A1:7C:E1:01:F4:71:84:4F:8E:12:85:0A:0A:54:DA:70:19:16 Authority key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 Certificate issuer: /CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Certificate serial: 2D7F8A5009D27878B18ED39BF884D6660EE73794 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft Manifest number: BC Signing time: Tue 04 Nov 2025 09:31:05 +0000 Manifest this update: Tue 04 Nov 2025 09:26:05 +0000 Manifest next update: Fri 07 Nov 2025 16:32:05 +0000 Files and hashes: 1: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 4bpu+mggFbzvJDFJ5R6f3m5fTkhrxUM9zXGsoRvy4HQ=) 2: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: 7y8609J4YjMYC9wN+hYXRDhk/NJUcPM91RuRT+GB4pQ=) 3: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl (hash: Chln6V2MJGXjtgMgkI+/kcGMZteHQUFwKy7eev3Rhuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 16:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:7f:8a:50:09:d2:78:78:b1:8e:d3:9b:f8:84:d6:66:0e:e7:37:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Validity Not Before: Nov 4 09:26:05 2025 GMT Not After : Nov 7 16:32:05 2025 GMT Subject: CN=CB14A17CE101F471844F8E12850A0A54DA701916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d4:76:c0:25:b8:94:30:a9:ff:a6:3d:e3:45: 27:47:4f:7b:25:fe:90:a4:16:15:2a:22:ad:3d:b6: 31:79:8c:59:68:c1:b8:4c:f3:ce:fc:52:86:de:db: cc:19:0b:54:02:8e:29:36:fc:f2:cf:90:ed:4b:32: 48:d2:78:72:48:2f:99:f7:e2:a8:b1:61:72:0f:74: 24:37:ec:e0:c7:e5:79:a1:6f:a3:fd:a3:e0:88:cf: 7e:6c:35:83:9e:1d:c7:56:94:ff:ba:1c:26:00:27: cb:99:3e:9c:90:19:57:79:34:1d:39:26:2f:65:58: 92:30:72:21:2f:c4:2a:a1:84:a8:b4:08:1c:4e:07: c0:bd:60:c7:0c:11:e5:91:48:9a:c5:54:01:14:6e: e2:b2:1e:a9:5b:44:69:83:56:ab:07:9b:f8:9d:34: 82:f3:e9:0b:38:56:88:8a:c3:df:36:4e:9b:28:e4: 84:e2:04:83:43:e4:fd:ec:0f:e7:f1:ae:e9:d9:47: 2f:85:6b:50:53:80:34:bb:fc:db:5b:58:5b:f5:be: 3e:69:6c:c7:f2:95:f2:f6:60:a3:28:30:d5:ba:e1: 76:d8:76:68:49:07:35:4f:27:a7:4f:2c:9a:2e:36: 32:2d:49:ab:fd:16:73:1f:d1:d6:5e:3d:ec:b3:3a: 90:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:14:A1:7C:E1:01:F4:71:84:4F:8E:12:85:0A:0A:54:DA:70:19:16 X509v3 Authority Key Identifier: keyid:C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f9:a9:b5:96:fc:7d:5b:c3:4b:05:c8:d0:ac:1f:42:3d:57: 2c:4a:30:41:51:1e:35:70:8e:dc:01:d5:ff:8f:76:f3:7a:cd: e9:7b:98:75:9d:f4:92:c0:a4:f5:2a:ba:31:6f:6e:de:53:35: e0:aa:f9:e8:46:54:0c:b8:35:46:b1:c4:53:30:0b:dc:8e:6d: ae:5a:2d:1f:34:ca:d2:24:fb:9c:3d:32:47:57:6f:44:f6:2b: 6b:49:b2:59:21:4d:1f:47:6d:9a:9a:b9:41:32:8e:65:25:81: 89:dd:c8:a8:1e:f3:c8:5e:00:17:c3:d0:81:2d:fe:62:fb:73: cf:fc:83:15:60:d3:a1:48:da:e6:1a:ff:2d:3f:30:76:0d:94: 6d:cb:17:74:fe:28:8b:2a:ff:91:8d:e8:96:93:85:b3:ce:f8: d6:35:9d:18:08:f5:c8:fc:23:b8:23:d9:bb:d2:b4:cc:33:be: 91:bc:ab:a1:b0:43:0f:e8:b3:08:b0:0d:60:0b:14:b0:58:b1: 45:d3:b0:4c:00:f7:86:c2:cf:9e:83:0f:ff:da:30:45:91:5b: 9a:dd:b6:ee:4f:2b:5d:bc:f9:b7:83:23:9c:aa:13:ff:72:95: 40:2f:4d:1b:52:6e:5c:ee:cb:6c:d7:e5:9c:c5:cc:3d:7a:94: cd:d7:42:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULX+KUAnSeHixjtOb+ITWZg7nN5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDky N0MxNEU1NTAeFw0yNTExMDQwOTI2MDVaFw0yNTExMDcxNjMyMDVaMDMxMTAvBgNV BAMTKENCMTRBMTdDRTEwMUY0NzE4NDRGOEUxMjg1MEEwQTU0REE3MDE5MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1HbAJbiUMKn/pj3jRSdHT3sl /pCkFhUqIq09tjF5jFlowbhM8878Uobe28wZC1QCjik2/PLPkO1LMkjSeHJIL5n3 4qixYXIPdCQ37ODH5Xmhb6P9o+CIz35sNYOeHcdWlP+6HCYAJ8uZPpyQGVd5NB05 Ji9lWJIwciEvxCqhhKi0CBxOB8C9YMcMEeWRSJrFVAEUbuKyHqlbRGmDVqsHm/id NILz6Qs4VoiKw982Tpso5ITiBIND5P3sD+fxrunZRy+Fa1BTgDS7/NtbWFv1vj5p bMfylfL2YKMoMNW64XbYdmhJBzVPJ6dPLJouNjItSav9FnMf0dZePeyzOpA/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyxShfOEB9HGET44ShQoKVNpwGRYwHwYDVR0j BBgwFoAUwtWT0cin9w1FEl1L2+V3SSfBTlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZGIwMTMwZC1jYWEzLTQ3NmYtYWY4MS1iYTcyMjMzMGJlMmMvMC9DMkQ1OTNEMUM4 QTdGNzBENDUxMjVENEJEQkU1Nzc0OTI3QzE0RTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDkyN0Mx NEU1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3 NDkyN0MxNEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/5qbWW/H1bw0sFyNCsH0I9VyxKMEFRHjVw jtwB1f+PdvN6zel7mHWd9JLApPUqujFvbt5TNeCq+ehGVAy4NUaxxFMwC9yOba5a LR80ytIk+5w9MkdXb0T2K2tJslkhTR9HbZqauUEyjmUlgYndyKge88heABfD0IEt /mL7c8/8gxVg06FI2uYa/y0/MHYNlG3LF3T+KIsq/5GN6JaThbPO+NY1nRgI9cj8 I7gj2bvStMwzvpG8q6GwQw/oswiwDWALFLBYsUXTsEwA94bCz56DD//aMEWRW5rd tu5PK128+beDI5yqE/9ylUAvTRtSblzuy2zX5ZzFzD16lM3XQoE= -----END CERTIFICATE-----Generated at Wed Nov 5 08:21:07 2025 by rpki-client